Lucene search

CiscoCVE-2019-1625

HistoryJun 20, 2019 - 3:15 a.m.

CVE-2019-1625

2019-06-2003:15:11

CWE-264

cisco

web.nvd.nist.gov

223

cisco

sd-wan

vulnerability

cli

authenticated

local attacker

elevate privileges

root user

nvd

cve-2019-1625

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

Percentile

5.1%

JSON

A vulnerability in the CLI of Cisco SD-WAN Solution could allow an authenticated, local attacker to elevate lower-level privileges to the root user on an affected device. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by authenticating to the targeted device and executing commands that could lead to elevated privileges. A successful exploit could allow the attacker to make configuration changes to the system as the root user.

Affected configurations

Nvd

Node

ciscosd-wan_firmwareRange<18.3.6

ciscosd-wan_firmwareMatch18.4.0

AND

ciscovedge-100Match-

ciscovedge-1000Match-

ciscovedge-2000Match-

ciscovedge-5000Match-

ciscovedge_100bMatch-

ciscovedge_100mMatch-

ciscovedge_100wmMatch-

VendorProductVersionCPE
ciscosd-wan_firmware*cpe:2.3:o:cisco:sd-wan_firmware:*:*:*:*:*:*:*:*
ciscosd-wan_firmware18.4.0cpe:2.3:o:cisco:sd-wan_firmware:18.4.0:*:*:*:*:*:*:*
ciscovedge-100-cpe:2.3:h:cisco:vedge-100:-:*:*:*:*:*:*:*
ciscovedge-1000-cpe:2.3:h:cisco:vedge-1000:-:*:*:*:*:*:*:*
ciscovedge-2000-cpe:2.3:h:cisco:vedge-2000:-:*:*:*:*:*:*:*
ciscovedge-5000-cpe:2.3:h:cisco:vedge-5000:-:*:*:*:*:*:*:*
ciscovedge_100b-cpe:2.3:h:cisco:vedge_100b:-:*:*:*:*:*:*:*
ciscovedge_100m-cpe:2.3:h:cisco:vedge_100m:-:*:*:*:*:*:*:*
ciscovedge_100wm-cpe:2.3:h:cisco:vedge_100wm:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	sd-wan_firmware	*	cpe:2.3:o:cisco:sd-wan_firmware::::::::
cisco	sd-wan_firmware	18.4.0	cpe:2.3:o:cisco:sd-wan_firmware:18.4.0:::::::*
cisco	vedge-100	-	cpe:2.3:h:cisco:vedge-100:-:::::::*
cisco	vedge-1000	-	cpe:2.3:h:cisco:vedge-1000:-:::::::*
cisco	vedge-2000	-	cpe:2.3:h:cisco:vedge-2000:-:::::::*
cisco	vedge-5000	-	cpe:2.3:h:cisco:vedge-5000:-:::::::*
cisco	vedge_100b	-	cpe:2.3:h:cisco:vedge_100b:-:::::::*
cisco	vedge_100m	-	cpe:2.3:h:cisco:vedge_100m:-:::::::*
cisco	vedge_100wm	-	cpe:2.3:h:cisco:vedge_100wm:-:::::::*

CNA Affected

[
  {
    "product": "Cisco SD-WAN Solution",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "18.3.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.securityfocus.com/bid/108844

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-sdwan-privesca

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2019-1625